Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/3137392e302e32352e302f32342d3234203d3e20323632323635.roa
File:                     3137392e302e32352e302f32342d3234203d3e20323632323635.roa (raw, json)
Hash identifier:          6VlYzYLIpEHZcyD4ymOetZ91VGXMwHvx7xjjRWvVOT0=
Subject key identifier:   B2:4C:FB:8C:2C:FE:47:AF:6D:BA:9E:A7:6B:F5:CE:BE:6C:F4:54:D2
Certificate issuer:       /CN=11C304C83DF0BA64DD147CDAD96E935F0037079F
Certificate serial:       72E3238F16E576FE3C72DBDA955B111C1F0EE28B
Authority key identifier: 11:C3:04:C8:3D:F0:BA:64:DD:14:7C:DA:D9:6E:93:5F:00:37:07:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/3137392e302e32352e302f32342d3234203d3e20323632323635.roa
Signing time:             Tue 04 Feb 2025 18:01:18 +0000
ROA not before:           Tue 04 Feb 2025 17:56:18 +0000
ROA not after:            Tue 03 Feb 2026 18:01:18 +0000
asID:                     262265
IP address blocks:        179.0.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e3:23:8f:16:e5:76:fe:3c:72:db:da:95:5b:11:1c:1f:0e:e2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C304C83DF0BA64DD147CDAD96E935F0037079F
        Validity
            Not Before: Feb  4 17:56:18 2025 GMT
            Not After : Feb  3 18:01:18 2026 GMT
        Subject: CN=B24CFB8C2CFE47AF6DBA9EA76BF5CEBE6CF454D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:1e:b6:8a:5f:34:8b:3b:a3:f9:e2:1d:5b:
                    94:8f:8d:60:32:86:ed:d6:81:8a:09:e4:8c:06:37:
                    dd:83:e8:b8:6c:12:c6:87:6b:94:33:c5:06:d8:fb:
                    03:7c:22:9c:a9:cb:7e:2f:64:92:e4:a8:52:78:b8:
                    e5:6c:77:ef:2f:45:89:97:c0:fa:51:f5:71:34:60:
                    ae:2d:26:03:5d:d8:0b:2c:37:79:be:af:7b:c6:ba:
                    e9:5e:fc:58:50:d9:c7:70:34:8a:97:ba:6c:4e:7a:
                    c0:d3:3d:9e:5c:6c:da:67:07:0b:90:cc:ff:ea:b7:
                    49:16:6d:9a:4f:ad:a8:33:8c:fc:2f:76:a6:84:b7:
                    e3:85:f4:c0:c8:f5:82:0c:41:81:f6:f9:ce:2d:28:
                    e3:87:4e:fb:a6:46:53:68:c7:38:6f:6e:a7:31:cb:
                    b6:51:6b:44:e0:51:17:5f:f1:6c:81:1b:50:41:57:
                    f1:0f:3c:80:2d:50:73:1e:df:de:d4:74:25:bd:16:
                    d1:6d:bf:71:50:b2:15:b9:f9:ca:c3:1e:e0:d0:6e:
                    3e:d5:ae:32:5f:9f:75:c0:e0:6e:14:cd:2f:c3:eb:
                    33:2d:04:1e:7c:66:55:4b:44:9c:b0:c5:b6:f8:3e:
                    a9:0e:9a:b0:b5:19:f9:20:7f:1e:66:10:85:c9:32:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4C:FB:8C:2C:FE:47:AF:6D:BA:9E:A7:6B:F5:CE:BE:6C:F4:54:D2
            X509v3 Authority Key Identifier:
                keyid:11:C3:04:C8:3D:F0:BA:64:DD:14:7C:DA:D9:6E:93:5F:00:37:07:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/3137392e302e32352e302f32342d3234203d3e20323632323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:61:81:f2:b4:e0:aa:d7:75:ba:a5:8d:38:0e:f6:46:3e:
         a6:34:6b:af:ed:8f:d0:4a:10:18:72:53:1e:20:eb:05:50:74:
         7d:97:ca:b3:85:72:25:f7:c8:7d:0f:12:17:fb:b7:b5:93:0d:
         3f:99:78:24:3c:cc:4d:14:e3:79:37:f8:be:a3:ab:36:93:2a:
         73:2e:7e:48:7d:7b:c2:16:1a:b4:ee:49:c4:d9:3e:89:c4:80:
         38:81:f5:54:0d:0f:83:af:21:3f:ea:eb:ec:8c:82:f3:bd:50:
         e7:e4:90:22:1a:91:ce:bc:c1:52:c0:d1:be:d6:2a:d0:13:52:
         84:3e:6b:35:38:13:fc:5d:63:61:bb:52:4b:44:06:7e:44:62:
         46:b7:75:1c:38:52:fc:2c:fe:c4:16:d6:9f:92:dd:c5:fd:90:
         65:7b:43:08:b8:cb:84:47:55:19:1f:d5:1e:7f:ea:9e:da:b2:
         82:0a:4a:b4:78:df:c5:86:68:61:8a:d6:e5:3e:c8:da:52:ab:
         f4:79:3c:d1:02:5c:6b:66:36:83:ed:53:f2:aa:e2:61:de:e9:
         7b:43:e3:fa:53:35:39:17:a0:5b:a2:bb:5a:70:9d:d8:4b:ab:
         d1:72:92:2b:46:06:fd:d2:2a:2b:87:97:96:5f:3d:2c:d2:59:
         fe:2f:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:04 2025 by rpki-client